34503/WWM/A522 
CLAIMS: 



25 




A system composing: 
a database with entr/es correlating each of a plurality of user IDs with an 
individualized rule set; 

a dial-up network server that receives user IDs from users' computers; 
a redirection server aonnected to the dial-up network server, an authentication 
10 accounting server connec/ed to the database, the dial-up network server and the 
redirection server; 

wherein the diakA) network server communicates a first user ID and a 
temporarily assigned nejfwork address for the first user ID to the authentication 
accounting server; and 

15 wherein the authentication accounting server accesses the database and 

communicates the individualized rule set that correlates with the user ID and the 
temporarily assigned nqftwork address to the redirection server. 

2. The system of claim 1, wherein the redirection server further provides 
20 control over a plurality of data to and from the users' computers as a function of the 

individualized rule set. 

3. The system of claim 1, wherein the redirection server further blocks the 
data to and from the users' computers as a function of the individualized rule set. 



4. The system of claim 1, wherein the redirection server further allows the 
data to and from the users' computers as a function of the individualized rule set. 



5. The system of claim 1, wherein the redirection server further redirects the 
30 data to and from the users' computers as a function of the individualized rule set. 

6. The system of claim 1 , wherein the redirection server further redirects the 
data from the users' computers to multiple destinations as a function of the 
individualized rule set. 
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7. The system of claim 1 , wherein the database entries for a plurality of the 
plurality of users' IDs are correlated with a common individualized rule set. 
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In a system comprising a database with entries^pfr^lating each of a 
plurajjfy of user IDs with an individualized rule set; a dial-u^nefwork server that receives 
user IDs from users' computers; a redirection sep^efconnected to the dial-up network 
server, an authentication accounting ^jvg ^onnecte d4Q4he^d^ tabase, the d ial-up 
network server and the redirectioj>s£J^ comprisingThe st ^s~ofT) 

communicating a firet*j£er ID and a temporarily assigned network address for the 
first user ID from theplisff^up network server to the authentication accounting server; and 
commupk^ting the individualized rule set that correlates with the user ID and the 
temporarij^cissigned network address to the redirection server from the authentication 
accou/ffing server. 

9. The method of claim 8, further including the step of controlling a plurality 
of data to and from the users' computers as a function of the individualized rule set. 

10. The method of claim 8, further including the step of blocking the data to 
and from the users' computers as a function of the individualized rule set. 

1 1 . The method of claim 8, further including the step of allowing the data to 
and from the users' computers as a function of the individualized rule set. 

12. The method of claim 8, further including the step of redirecting the data 
to and from the users' computers as a function of the individualized rule set. 



13. The method of claim 8, further including the step of redirecting the data 
30 from the users' computers to multiple destinations a function of the individualized rule 

set. 

14. The method of claim 8, further including the step of creating database 
entries for a plurality of the plurality of users' IDs, the plurality of users' ID further being 

35 correlated with a common individualized rule set. 
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system comprising: 

redirection server programed with a user's rule set correlated to a temporarily 
5 assigned network address; 

wherein the rule set contains at least one of a plurality of functions used to control 
the user's data; and 

wherein the /redirect ion server is configured to allow modification of at least a 
portion of the rule^set. 
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16. The system of claim 15, wherein the redirection server is configured to 
allow modification of at least a portion of the rule set as a function of time. 



17. The system of claim 15, wherein the redirection server is configured to 
3 15 allow modification of at least a portion of the rule set as a function of the data 
f U transmitted to or from the user. 



18. The system of claim 15, wherein the redirection server is configured to 
allow modification of at least a portion of the rule set as a function of the location or 

20 locations the user access. 

19. The system/of l&alfri 15, wherein the redirection server is configured to 
allow modification of at least a portion of the rule set as a function of some combination 
of time, data transmitted to from the user, or location or locations the user access. 

25 

2Cf. The system of claim 15, wherein the redirection server is configured to 
allow the removal or reinstatement of at least a portion of the rule set as a function of 
time. 



30 J^T. The system of claim 15, wherein the redirection server is configured to 

allow the removal or reinstatement of at least a portion of the rule set as a function of 
the data transmitted to or from the user. 
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The system of claim 15, wherein the redirection server is configured to 
allow the removal or reinstatement of at least a portion of the rule set as a function of 
5 the location or locations the user access. 

*23C The system of claim 15, wherein the redirection server is configured to 
allow the removal or reinstatement of at least a portion of the rule set as a function of 
some combination of time, data transmitted to or from the user, or location or locations 
10 the user access. 

The system of claim 15, wherein the redirection server has a user side that 
is connected to a computer using the temporarily assigned network address and a 
network side connected to a computer network and wherein the computer using the 
15 temporarily assigned network address is connected to the computer network through 
the redirection server. 



^1 The system of claim \a 



The system of claim 24 wherein instructions to the redirection server to 
modify the rule set are received by one or more of the user side of the redirection server 
20 and the network side of the redirection server. 



In a system comprising a redirection server containing a user's rule set 
corr^&ted to a temporarily assigned network jaradress wherein the user's rule set 
contains at least one of a plurality of functus used to control the user's data; the 
25 method comprising the step of: 

modifying at least a portion of theytfser's rule set while the user's rule set remains 
correlated to the temporarily assignee network address in the redirection server. 



7?. The method of claim 2^ further including the step of modifying at least a 
30 portion of the user's rule set as a function of one or more of: time, data transmitted to 
or from the user, and location or locations the user access. 

The method of claim 26, further including the step of removing or 
reinstating at least a portion of the user's rule set as a function of one or more of: time, 
35 the data transmitted to or from the user and the location or locations the user access. 
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29. The method of claim 2^/wherein the redirection server has a user side 
that is connected to a computer u^ihg the temporarily assigned network address and 
5 a network side connected a computer network and wherein the computer using the 
temporarily assigned netwcra^gddress is connected to the computer network through 
the redirection server andflme rrpthod further includes the step of:. 

receiving instructions by^ne redirection server to modify at least a portion of the 
user's rule set thrpdgh one^or more of the user side of the redirection server and the 
10 network side q^fne redirection server. 
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